CVE-2018-3947: Yitechnology Yi Home

High severity, CVSS 8.1. EPSS: 1.3% chance of exploitation in the next 30 days.

An exploitable information disclosure vulnerability exists in the phone-to-camera communications of Yi Home Camera 27US 1.8.7.0D. An attacker can sniff network traffic to exploit this vulnerability.

Affected products

• Yitechnology Yi Home: affected versions not specified
• Yitechnology Yi Home Camera Firmware: version 1.8.7.0d only

Published 2018-11-01. Last modified 2026-06-17.